Behavioral task
behavioral1
Sample
5977952d10d2cc681ef5eaa24db66085.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5977952d10d2cc681ef5eaa24db66085.exe
Resource
win10v2004-20231215-en
General
-
Target
5977952d10d2cc681ef5eaa24db66085.bin
-
Size
133KB
-
MD5
5977952d10d2cc681ef5eaa24db66085
-
SHA1
72a1ee5d6d8965cffda4e985b82820608c01638d
-
SHA256
04ae2bb4985a69cb12508c233c2e49a3bb3be0c9fa8432c99538f28cebbb4694
-
SHA512
f6743fa7643c0e48c3d30634c8ce19235b74797adfce878d494202ca0ba6173cf9a54159ee3eca206af8361d039fd25ed891077e2b0b41ed15745a0b6c0870fa
-
SSDEEP
3072:RYLk12Cf0nYKsCOa1r0ihG/5a+Wihn9BcYatVI0Q:wCfgFsCOa1AiM/5a4h3br0Q
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5977952d10d2cc681ef5eaa24db66085.bin
Files
-
5977952d10d2cc681ef5eaa24db66085.bin.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE